Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
File: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json)
Hash identifier: trJb37x9b+mP+Z6VsD19PwyQcVyt96HC274e8GDjnGE=
Subject key identifier: A0:C8:CC:DF:BA:D9:A5:BE:69:F3:ED:AF:21:BC:E4:75:38:D0:50:AB
Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Certificate issuer: /CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Certificate serial: 0199FBEB4B5ABEBB2975E21870D8F15755CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: vfamUk0P9r9Hq757o/2QwkUa/9o62oHoEC2ZaYAdq5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4b:5a:be:bb:29:75:e2:18:70:d8:f1:57:55:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=a0c8ccdfbad9a5be69f3edaf21bce47538d050ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:c2:e7:73:da:e8:60:6d:54:e1:e7:c9:ec:
ff:f3:f5:3b:cf:64:5c:b5:37:9f:4f:25:c9:61:2f:
f0:93:af:27:23:61:28:7d:6e:5d:0d:5c:53:ed:5e:
f6:05:d7:1f:14:e7:b7:a0:97:ac:ee:25:97:1b:05:
47:ea:3c:56:b7:ea:8f:5a:11:09:2c:04:e6:69:aa:
6d:42:ae:6b:e9:17:a5:11:2e:3c:4a:f6:c9:e6:10:
3a:02:8d:93:b3:3b:ce:d9:ca:e1:8b:f7:bb:2d:20:
39:dd:1d:4a:f6:1a:1b:95:c7:e4:54:c0:2b:fb:82:
a5:f4:b0:e9:b9:07:37:d1:87:e7:3e:ff:68:71:fb:
0e:8b:af:f8:e0:f0:11:05:bd:31:a7:83:e4:e2:55:
12:dc:1d:c1:df:04:de:61:4d:ab:83:0f:e5:22:e8:
2a:7f:69:1b:f7:65:27:10:45:9e:b2:67:48:81:1b:
48:35:3a:b6:00:66:5e:ef:2b:ad:8a:93:32:02:3f:
59:cb:a7:8a:c1:a0:32:b1:41:19:31:ba:07:41:2e:
1c:4a:1e:cf:62:ab:4c:f4:24:e0:61:80:7d:26:3b:
05:06:35:74:cb:34:19:0f:27:4b:26:1f:5d:70:e7:
76:36:7c:f8:d5:52:69:d3:97:50:af:28:94:e3:4c:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C8:CC:DF:BA:D9:A5:BE:69:F3:ED:AF:21:BC:E4:75:38:D0:50:AB
X509v3 Authority Key Identifier:
keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:19:5e:c8:b8:62:9b:a8:ba:8d:92:6c:39:d1:22:92:4a:33:
dd:01:5e:e0:37:30:78:38:af:80:74:24:6f:f9:eb:ec:cf:65:
8e:e2:70:11:f5:8d:9a:4b:69:cb:f1:08:08:6a:c2:b6:7f:53:
f8:16:65:61:4b:17:d0:c7:07:42:eb:27:6c:d0:71:da:bd:4e:
fc:e9:6d:63:55:66:6b:cd:99:d6:aa:6d:48:72:21:9b:52:b9:
01:7a:40:f0:5e:3e:a9:94:6f:bb:3e:9e:c0:9a:c1:6e:4b:84:
79:85:1b:1b:69:3f:7a:cb:1e:a7:fb:fe:c2:96:b9:07:87:68:
0b:42:07:bf:0e:e2:01:8d:60:91:30:57:0e:fb:ec:d0:c2:dd:
32:d3:e1:98:6f:f0:f1:33:13:fc:8d:42:6d:f0:ae:79:c0:05:
9b:2e:a8:41:36:fe:bc:b7:a7:14:65:22:d3:a7:7e:9b:c7:d9:
5e:a1:1b:51:69:0f:26:1f:da:dc:b8:44:f2:7f:21:b9:e4:06:
e9:97:22:74:b8:0d:84:4d:a3:1c:98:b9:ea:44:dc:54:2a:e9:
0b:76:d3:84:b5:f8:3b:23:b5:f7:58:d5:a1:18:aa:38:3d:56:
48:9c:e8:14:75:4b:44:54:b2:62:a4:5f:6f:13:97:16:f5:3a:
75:21:61:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:23 2025 by rpki-client